I already realize that configure Redhat 5.5
as PDC (Primary Domain Controller), and the clients (Windows XP
and Windows 2003
) can join the realm. The realm name of Linux server is EXAMPLE.COM
.
Currently, when the time client (e.g., Windows 2003
) join EXAMPLE.COM
, from the packet captured by the Wireshark
, we learn that there is only NTLM packet in the dcerpc protocol, there is no kerberos packet. The conclusion is that the client is not executing kerberos authentication.
My samba configuration file smb.conf is as follow:
[global]
workgroup = SINF #my domain name
server string = Samba PDC Server
netbios name = SAMBA149 #my host name
local master = yes
preferred master = yes
domain master = yes
local master = yes
wins support = yes
os level = 100
domain logons = yes
logon drive = K:
logon script = startup.bat
time server = yes
admin users = root
logon path = \\%N\%U\profile
logon home = \\%N\%U
log file = /var/log/samba/log.%m
max log size = 50
security = user
passdb backend = tdbsam
[netlogon]
comment = Network Logon Service
path = /winhome/netlogon
writable = no
write list = root
follow symlinks = yes
guest ok = yes
[homes]
comment = Home Directiories
browseable = no
writable = yes
create mode = 0664
directory mode = 0775
[project]
comment = smbuser's project
path = /home/samba/project
browseable = yes
writeable = yes
write list = @users
Next, I want execution of the kerberos authentication when the client join the PDC, how can I realize it? Any help would be appreciate sincerely! Thank you very much in advance!